Security Research & Development
Tools and platforms I've built to improve cybersecurity practices
Oracle - Software Developer, Global Product Security
Currently working as a Software Developer in Oracle's Global Product Security team, where I focus on building security automation tools and vulnerability intelligence platforms. I build AI tools to automate vulnerability management processes, improving the efficiency and accuracy of security assessments.
Role: Software Developer, Global Product Security
Duration: February 2025 - Present
Focus: AI-powered security automation, CVSS scoring automation, and vulnerability management platforms
Impact: Contributing to Oracle's comprehensive security posture and product protection through intelligent automation
OCPPStorm: A Comprehensive Fuzzing Tool for OCPP Implementations
A comprehensive black box fuzzing tool that identified multiple critical vulnerabilities in OCPP implementations, leading to the discovery of CVEs and improved security for electric vehicle charging infrastructure. The tool employs multiple fuzzing strategies including Random Fuzzer, State Machine Fuzzer, and Isla Fuzzer.
Results: 6 CVEs discovered and assigned
Publication: Network and Distributed System Security (VehicleSec) 2024 - NDSS Symposium
Impact: Improved security of electric vehicle charging infrastructure. All the CVEs were addressed and fixed by the OCPP implementers.